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Anyone  who  has  watched  a  newsreel  of  the  count -down  and  launch 
ing  of  a  missile  has  no  doubt  been  amazed  at  the  intricate  details 
and  precautions  involved.  This  is  evidenced  by  the  warning  horns, 
lights,  loudspeakers  blaring  to  clear  personnel  from  the  area,  block¬ 
house  activity,  and  the  continue  checking  by  the  launch  control 
officer.  These  are  visual  indications  of  a  vast  safety  program  con¬ 
tinuously  operating  behind  the  scenes  to  protect  the  missile  teams 
and  their  equipment  as  well  as  the  general  public. 

Curing  the  missile  era  infancy  the  safety  program  was  integrated 
into  the  Air  Force's  already  existing  aggressive  flight  safety  pro 
gram.  However,  as  large  missiles  such  as  Thor  and  Atlas  became 
operational  it  was  apparent  that  the  flight  safety  approach  alone 
would  not  be  sufficient.  In  manned  aircraft  equipment  maliXmctions 
are  compensated  for  by  the  skill  of  the  rilot.  Consequently  the  air¬ 
craft  can  be  landed,  repaired.,  and  placed  back  into  service.  This 
is  not  true  in  missile  operations  where  the  malfunction  of  a  small 
component  may  destroy  an  expensive  missile  vehicle. 
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Any  views  expressed  in  this  paper  are  those  of  the  author. 
They  should  not  be  interpreted  as  reflection  the  views  of  the  HAND 
Corporation  or  the  official  opinion  or  policy  of  any  of  its  govern¬ 
mental  or  private  research  sponsors .  Parers  are  reproduced  by  The 
RAND  Corporation  as  a  courtesy  to  members  of  its  staff. 

This  paper  will  appear  in  the  December  1962  issue  of  Skyli&hts , 
a  monthly  publication  of  the  National  Aerospace  Education  Council. 

It  was  prepared  in  coonei'ation  with  Mr.  Francis  R  Fowler,  Chief, 
Information  Section,  Office  of  the  Deputy  Inspector  General  for 
Safety,  Norton  Air  Force  Base,  California. 
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Tfce  whole  idee  of  missile  operations  is  to  prepare  a  weapon  for 
launch,  then  let  it  rental n  in  a  ready  condition  until  needed.  If  it 
is  ever  required  to  fire,  all  components  must  work  perfectly  the 
first  time  in  order  to  accomplish  the  mission.  Because  of  this  wide 
difference  in  concept  between  aircraft  and  missiles  and  the  higher 
potential  explosive  yields  contained  In  missile  and  nuclear  warheads, 
it  was  necessary  for  the  Air  Force  to  expand  and  strengthen  its 
whole  accident  prevention  program. 
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A  decision  was  made  to  consolidate  all  Air  Force  safety  functions 
under  a  single  Jurisdiction  with  increased  emphasis  on  missile  and 
nuclear  safety.  As  a  result,  the  Pentagon*- level  Office  of  the 
Deputy  Inspector  General  for  Safety  was  established  with  headquarters 
first  in  Washington,  D.C.,  then  later  at  Norton  AFB,  San  Bernardino, 
California.  Coamanded  by  Major  General  Perry  B.  Griffith,  this  office 
is  divided  into  four  major  directorates  responsible  for  all  Air  Fbrce 
missile,  flight,  ground,  and  nuclear  safety  programs .  These  direc¬ 
torates  are  complemented  by  Assistants  for  Life  Sciences,  Education 
and  Training,  and  Records  and  Statistics.  Colonel  George  T.  Suck, 
Director  of  Missile  Safety,  is  in  charge  of  implementing,  guiding, 
and  monitoring  the  worldwide  missile  safety  program. 

As  pointed  out  by  Colonel  Buck,  the  missile  safety  program  goes 
far  deeper  than  the  airborne  missile  itself.  Hearly  85  per  cent  of 
the  operation— and  nearly  that  much  of  the  cost— involves  aerosnace 
ground  equipment  (AGE).  AGE  is  all  the  handling,  testing,  checking, 
and  monitoring  equipment  required  to  prepare  and  launch  a  missile 
vehicle .  Because  personnel  are  predominantly  working  with  AGS,  the 


majority  of  missile  accidents  originate  in  this  are'..  With  the 
limited  operational  time,  uv-i-funct  ions  and  failures  must  be  identi¬ 
fied  and  prevented  before  they  occur  even  once. 

Missile  safety  men  must  continually  er \  themselves  Questions  to 
identify  the  problems  and  deficiencies  associated  with  AGE  and  deci¬ 
sions  concerning  the  best  course  of  corrective  action  must  be  made. 

An  example  of  this  was  a  need  for  more  in:  urination  by  missile  safety 
and  operating  personnel  in  field  activity  is  about  high  energy  pneu¬ 
matic  and  fluid  systems  involving  press  res  greater  then  5,000  psi. 

To  search  out  the  information,  personr  -.  '  from  the  Directorate  of 
Missile  Safety  initiated  the  establishment  of  an  Air  Force  Steering 
Committee  and  Working  Group  on  Integrated  Pressure  Systems  and  Com¬ 
ponents  .  Information  was  gathered,  pests  conducted,  evaluations 
made,  and  a  Technical  Order  van  published  which  contained  the  needed 
information.  There  are  many  other  examples  involving  cleaning  fluids, 
valves,  electrical  relays,  and  cam  utents  on  which  effective  correc¬ 
tive  action  was  taken  following  ide;r_ fication  of  the  problem. 

The  above  example  highlights  the  importance  of  Colonel  Buck's 
philosophy  end  drive  to  orientate  the  vhole  missile  safety  program 
back  to  basic  design  and  prevention.  >ne  tiny  mistake  on  the  drawing 
board — or  in  basic  concept  planning- -not  only  may  be  extremely  costly, 
but  also  disastrous  if  allowed  to  pass  unnoticed.  Engineering  changes 
often  require  equipment  modification,  technical  data  revisions,  and 
retrofit  programs  effecting  maintenance  and  operation  schedules .  In 
the  case  of  large  lead's  and  their  com/.  Heated  construction  schedules , 
a  small  change  may  delay  an  operational  ready  date  by  weeks.  An 
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example  of  this  is  where  a  minor  breakdown  of  a  transporter  carrying 
a  missile  to  a  given  site,  which  took  approximately  three  hours  to 
fix,  affected  the  maintenance  and  operations  program  of  a  certain 
base  for  the  next  eight  days. 

Safety,  like  every  other  phase  of  the  missile  operation,  is  a 
team  effort.  At  the  blockhouse,  which  contains  the  launch  control 
equipment  and  consoles,  the  safety  man  must  make  a  physical  inspec¬ 
tion  of  the  building  and  equipment  prior  to  a  launch.  He  checks  for 
the  proper  functioning  of  blast  doors,  escape  hatches,  and  ventila¬ 
tion  systems .  In  case  of  missile  malfunction,  these  items  are  very 
important  to  the  launch  crew.  If  a  missile  should  blow  up  on  the 
pad,  personnel  must  be  protected  from  the  blast  and  ensuing  fire. 
Escape  routes  must  be  carefully  checked  in  advance. 

Hie  safety  man  not  only  has  to  solve  present  problems,  but  keep 
an  eye  on  the  future  as  well.  Safety  procedures  must  be  constantly 
revised  to  keep  pace  with  new  and  stronger  metals,  changes  in  fuels, 
increased  pressures,  electronic  component  improvements,  etc.  What 
was  a  safe  practice  one  day  may  become  a  hazardous  operation  the 
next  day.  Take  the  case  of  using  asphalt  to  pave  the  missile  launch 
sites  for  example.  When  liquid  oxygen  (LOX)  was  introduced  as  a  - 
primary  oxidizer,  a  potential  hazard  developed.  If  LOX  were  to  leak 
or  be  inadvertently  spilled  on  asphalt,  it  would  immediately  combine 
with  the  oil  and  form  an  extremely  explosive  gel.  This  gel  is  so 
"Impact  sensitive"  that  a  scuff  of  a  man’s  shoe  might  blow  off  his 
leg!  Fortunately,  the  hazard  was  discovered  early  in  the  missile 
program  end  very  few  areas  had  to  be  repaved  with  concrete. 
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Cryogenlc  fuels  and  oxidizers  such  as  LOX  and  liquid  hydrogen 
have  created  problems  because  both  mist  be  stored  and  handled  at 
unusually  low  minimum  temperatures  to  prevent  "boil-off."  I/3X,  for 
example,  cannot  be  permitted  to  rise  above  minus  130°F  which  is  Just 
30°  above  absolute  zero.  If  it  does,  it  will  expand  from  a  liquid 
to  a  vapor  state,  usually  with  a  disastrous  explosion. 

Another  cryogenic  fuel,  liquid  fluorine,  is  so  inflammable  that 
it  will  ignite  or  react  violently  upon  combination  with  almost  any 
substance,  even  with  vater  or  asbestos  because  of  the  contaminants 
contained  in  these  normally  "fire-proof"  substances. 

Among  the  special  problems  confronting  the  missile  safety  expert 
is  the  handling  of  toxic  propellants  and  chemicals.  Liquid  propel¬ 
lant  fuels  and  oxidizers  ere,  in  general,  highly  react ible  chemicals 
and  all  of  the  Ingredients  for  a  disaster  are  present  when  handling 
than.  Therefore,  the  missile  propellant  handlers  must  be  provided 
with  skillfully  designed  protective  equipment.  Certain  missile 
operating  activities  present  potential  hazards  that  are  difficult 
to  eliminate  or  adequately  safeguard.  As  an  example,  in  the  event 
of  a  nitric  acid  (HNO^,  oxidizer)  propellant  leak  the  propellant 
handlers’  lives  depend  on  protective  clothing.  Naturally,  the  type 
of  equipment  or  protective  garments  will  depend  upon  the  nature  of 
hazards  involved. 

What  type  of  protective  equipment  is  commonly  used  in  missile 
propellant  operations?  This  equipment  includes  toxic  vapor  sensors 
(the  nose  is  not  reliable),  vapor  concentration  analyzers,  fire 
detectors,  emergency  breathing  apparatus,  chemical  and  fire  resistant 
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protective  suits,  etc.  Perhaps  no  piece  of  personnel  safety  equip¬ 
ment  has  been  subject  to  greater  research  efforts  than  the  propel¬ 
lant  handlers'  suits.  One  can  literally  state  that  current  protec¬ 
tive  suits  will  save  a  man's  skin.  These  suits  have  the  following 
characteristics:  (l)  will  withstand  the  corrosive  effects  of  the 
most  reactive  propellants;  (2)  prevent  the  penetrating  effects  of 
iXiels  or  oxidizers ;  (3)  are  fire  retardant;  and  (4)  are  reasonably 
flexible  even  in  the  coldest  weather. 

Hew  about  communications  once  a  propellant  handler  Is  literally 
sealed  in  a  protective  suit?  A  compact  two-way  radio  is  installed 
in  the  suit  so  he  can  communicate  with  companion  missileers.  The 
cOst  of  one  of  these  protective  suits  is  equivalent  to  two  white  sable 
fur  coats! 

Air  Force  safety  men  are  learning  from  past  experience  and 
anticipating  what  will  be  needed  in  the  future.  Professional  train¬ 
ing  for  missile  safety  personnel  includes  a  special  eight -week  course 
at  the  University  of  Southern  California.  The  aim  is  for  every  mis¬ 
sile  unit  in  the  Air  Force  to  have  a  trained,  fully  qualified  Missile 
Safety  Officer. 

General  Griffith,  in  summing  up  the  safety  program,  said,  "I  am 
pleased  with  the  Air  Force's  integrated  approach  to  its  safety  mis¬ 
sion.  Our  people  are  dedicating  themselves  wholeheartedly  in  their 
labors  to  save  lives,  dollars,  and  machinery.  I  think  the  program 
has  proved  to  be  a  dollar  saver  for  the  taxpayer,  a  special  boon  to 
our  defense  program,  and  a  preserver  of  our  nation's  combat  potential." 


